/*
** Copyright (C) 2010 Calin Radoni
**
** This file is part of CHScanner.
**
** CHScanner is free software: you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation, either version 3 of the License, or
** (at your option) any later version.
**
** CHScanner is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
** GNU General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with CHScanner. If not, see <http://www.gnu.org/licenses/>.
*/

#pragma once

#define MAX_SID_NAME_SIZE 1024
#define MAX_MESSAGE_SIZE  2048

class MEventLogRecord
{
private:
	DWORD        recordNumber;
	DWORD        timeGenerated;
	DWORD        timeWritten;

	DWORD        eventId;
	WORD         eventType;
	WORD         eventCategory;

	WORD         numStrings;

	TCHAR        userName[MAX_SID_NAME_SIZE];
	TCHAR        domainName[MAX_SID_NAME_SIZE];
	SID_NAME_USE sidNameUse;

	TCHAR        message[MAX_MESSAGE_SIZE];

	bool GetAccountName(PSID sidIn, LPCTSTR machineNameIn);

public:
	MEventLogRecord(void);
	~MEventLogRecord(void);

	void Initialize(void);

	bool Set(LPCTSTR machineNameIn, BYTE*, DWORD);
};
